ContraVirus
ContraVirus is a rogue spyware application that poses as a legitimate anti-spyware program.[1] The application uses a false scanner to force computer users to pay for the removal of non-existent spyware items. It may also be known as ExpertAntivirus.[2][3]
Methods of infection
ContraVirus may be downloaded as a trojan horse, along with possible other software. Typically, it may be installed by the SmitFraud trojan.[4]
Symptoms of infection
ContraVirus has been known to display fake messages stating that a user's computer is infected with spyware. It may also install the file wincom27.dll, located in C:\WINDOWS\ and ext32inc.dll located in C:\WINDOWS\system\, in order to persuade a user to purchase the software.[5] Traditionally, a user will see Contravirus running a "scan" of their computer, at which time a user will be prompted to purchase the Contravirus software in order to remove the threat. It may also hijack the user's browser and install a toolbar.[6]
95, 98, Me, NT, XP, Server 2000, 2000, Server 2003, Vista, Server 2008, 7 and Server 2008 R2 are operating systems capable of becoming infected.
See also
- Malware
References
- ^ "W32/Contra.worm". Archived from the original on 2009-09-01. Retrieved 2008-08-20.
- ^ "Risk Detected".
- ^ http://www.ca.com/securityadvisor/pest/pest.aspx?id=453113271 [dead link]
- ^ "What is a Trojan Horse? Definition from WhatIs.com". Security. Retrieved 2023-12-11.
- ^ "How to Remove Contravirus (Removal Instructions) - Spyware and Malware Removal Guides Archive".
- ^ Vincentas (12 October 2012). "ContraVirus in SpyWareLoop.com". Spyware Loop. Retrieved 28 July 2013.
External links
- Symantec Security
- F-secure
- www.frsirt.com
- www.xp-vista.com